ASOS 'compromised' as hackers issue threat in alarming push notification

ASOS shoppers across the internet are reporting an alarming 'hack' that warns the popular online marketplace has been compromised. While not quite having the trajectory of Amazon going from online bookstore to one of the biggest companies in the world, ASOS has grown from a tiny acorn into a fashion and cosmetics powerhouse.

With up to 2.7 billion people using ASOS every year, millions are turning to the service every day to get everything from their summer fits to the perfect Christmas party outfit. Considering so many people use ASOS every day, there are obvious concerns about what bad actors could do if they've gotten inside its infrastructure.

What is the ASOS hack?

ASOS users report being hit with an October 6 notification in the United Kingdom. Whereas ASOS normally keeps you updated on what's out of stock in your shopping basket or what exclusive sales are on the way, this notification reads: "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it.”

The notification links out to a Telegram chat.

A DPO is the data protection officer, who takes ownership of safeguarding customer information. Much more than just what you've previously ordered, this could include addresses, emails, and even financials.

It's said that Snowflake is an online data platform that's used by numerous companies.

ASOS is still quiet on whether this is a genuine cyberattack, although UK law requires companies to notify users if they've been subjected to a 'high risk' attack.

More to follow…